 |
|
Nov 03, 2009, 03:51 AM // 03:51
|
#1 | |
|
God of Spammers
Join Date: Oct 2005
Location: in the middle of a burning cornfield...
Guild: Scars Meadows [SMS] (Officer)
|
Windows System Defender
Hey guys,
So my girlfriends computer has a virus on it called Windows System Defender. It installed itself while browsing the internet, no we don't remember what site it was. I looked up ways to remove it and I did everything it said to do and even removed an instances of it from the Registry. It still persists and continues to come back. It also won't let us boot up in safe mood. It gives us a blank blue screen when we try to do so. One idea was to repair Windows XP and it says it won't cause you to lose any of your data. I just figured I'd see if any one had heard of this and found a way to remove it. Quote:
Last edited by I pwnd U; Nov 03, 2009 at 04:57 AM // 04:57.. Reason: Added HJT Log |
|
|
|
|
Nov 03, 2009, 04:46 AM // 04:46
|
#2 |
|
Jungle Guide
Join Date: Feb 2008
|
This is a good thread about removal from Majorgeeks.com.
http://forums.majorgeeks.com/showthread.php?p=1405547 Actually: Bleepingcomputer's solution is much clearer and easier to follow. http://www.bleepingcomputer.com/viru...ystem-defender Last edited by Kumu Honua; Nov 03, 2009 at 04:50 AM // 04:50.. |
|
|
|
|
Nov 03, 2009, 04:50 AM // 04:50
|
#3 |
|
God of Spammers
Join Date: Oct 2005
Location: in the middle of a burning cornfield...
Guild: Scars Meadows [SMS] (Officer)
|
I did see that but I believe that it is tailored to that posters problems. I am working on getting a HJT log up so that I can post that as well.
Tried MAMB and no processes were detected but the symptoms are still there. Last edited by I pwnd U; Nov 03, 2009 at 04:53 AM // 04:53.. |
|
|
|
|
Nov 03, 2009, 10:36 AM // 10:36
|
#4 |
|
Lion's Arch Merchant
Join Date: Jul 2009
|
I would are Avira AV, and on install tell it to start at the earliest point, ( before windows boots up ) if it finds it, it will give you the option to deal with it,
Also, if you have windows restore on, you may need to turn it off, as if the Virus was present when windows took its restore point, even though you got rid of the Virus the system will still think its there, turning off restore point, rebooting system, scanning, then turning it back on when clean should stop this from happening. You should probably also take this time to back up all important files on your system. |
|
|
|
|
Nov 03, 2009, 10:06 PM // 22:06
|
#5 |
|
God of Spammers
Join Date: Oct 2005
Location: in the middle of a burning cornfield...
Guild: Scars Meadows [SMS] (Officer)
|
I downloaded Avira AV and told it scan at the earliest point. It didn't find anything and I am currently downloading avast! to run a boot time scan as I am more familiar with it.
I am reluctant to turn of Windows Restore as it deletes the previous points, which makes sense, but I'm afraid to do that in case we have to go back to a previous restore point before the virus got onto the computer. Also because it is not my computer it worries me to mess with that. So later tonight I'll figure out if we can do that or not. Anyone been able to read the HJT log and tell me anything about if it still has it or if it is just thinks it still has it? Tried to roll back the computer to a previous System Restore point with no luck. I have just disabled System Restore and are scanning again to see if I can find it. Last edited by I pwnd U; Nov 04, 2009 at 01:46 AM // 01:46.. |
|
|
|
|
Nov 04, 2009, 05:26 AM // 05:26
|
#6 | |
|
God of Spammers
Join Date: Oct 2005
Location: in the middle of a burning cornfield...
Guild: Scars Meadows [SMS] (Officer)
|
Quote:
|
|
|
|
|
|
Nov 04, 2009, 08:12 PM // 20:12
|
#7 |
|
Jungle Guide
Join Date: Feb 2008
|
Starbarsearch, sa23sl.exe are what I see in there but I also see that you have a (This is the scientific term here) metric asston of garbage applications. (Probably can blame Dell for most of it).
I can't tell if some of those are legit or not. Far too many for me to delve into. Personally, I would suggest going to malwarebytes forum and ask for assistance from those folks. http://www.malwarebytes.org/forums/i...hp?showforum=7 |
|
|
|
|
Nov 04, 2009, 10:28 PM // 22:28
|
#8 |
|
God of Spammers
Join Date: Oct 2005
Location: in the middle of a burning cornfield...
Guild: Scars Meadows [SMS] (Officer)
|
Well since it is my gfs mom's computer I can't go through a purge those programs like I would on mine.
Thanks for the link. I am posting a thread there right now. |
|
|
|
|
Nov 08, 2009, 05:56 PM // 17:56
|
#9 |
|
God of Spammers
Join Date: Oct 2005
Location: in the middle of a burning cornfield...
Guild: Scars Meadows [SMS] (Officer)
|
Solved.
 Thanks for the link Kumu Honua
|
|
|
|
|
Nov 08, 2009, 06:26 PM // 18:26
|
#10 |
|
Jungle Guide
Join Date: Feb 2008
|
Glad you got it all taken care of. Now you do realize you need to educate your GF's mom on how to avoid viruses...
AKA: Learn when to simply delete all those stupid "I thought you would like this" email forwards of kitties... |
|
|
|
 |
|
«
Previous Thread
|
Next Thread
»
| Thread Tools | |
| Display Modes | |
Linear Mode
|
|
All times are GMT. The time now is 01:13 AM // 01:13.
jQuery(document).ready(checkAds()); function checkAds(){if (document.getElementById('adsense')!=undefined){document.write("_gaq.push(['_trackEvent', 'Adblock', 'Unblocked', 'false',,true]);");}else{document.write("